Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32322d3232203d3e20323639363938.roa
File:                     34352e3139312e382e302f32322d3232203d3e20323639363938.roa (raw, json)
Hash identifier:          7dHPuOJKuplhTXbFAzr/aA6hdank/hEJRdp73pWB7SM=
Subject key identifier:   DC:F1:54:44:AE:1E:B6:25:02:AE:7B:CE:FA:8C:B7:D1:C1:8C:06:6F
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       171FCD580968E2CF172803DFAFAD9F062AC638A2
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32322d3232203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:51 +0000
ROA not before:           Thu 05 Feb 2026 05:48:51 +0000
ROA not after:            Thu 04 Feb 2027 05:53:51 +0000
asID:                     269698
IP address blocks:        45.191.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1f:cd:58:09:68:e2:cf:17:28:03:df:af:ad:9f:06:2a:c6:38:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:51 2026 GMT
            Not After : Feb  4 05:53:51 2027 GMT
        Subject: CN=DCF15444AE1EB62502AE7BCEFA8CB7D1C18C066F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:a5:5f:cc:ec:91:56:5f:a4:b9:b0:05:fe:
                    46:aa:9e:88:f6:5f:77:5e:f6:20:5c:46:8b:b4:10:
                    30:84:38:fa:a7:72:d0:33:12:22:e9:c8:19:45:1c:
                    4c:61:b9:3e:e6:34:12:e1:ec:5a:32:48:87:3d:25:
                    ab:84:fc:d5:5a:a9:64:09:59:fb:79:25:84:ca:de:
                    83:15:23:3b:20:bd:94:1c:4f:41:90:b9:08:b1:79:
                    88:33:10:b2:62:ba:53:d3:a0:5f:73:f9:c6:53:7e:
                    50:3a:1a:54:61:47:a9:94:7c:7e:f6:6e:7d:e8:75:
                    78:e0:35:e3:8e:7f:61:bd:b7:7f:a4:92:ed:cb:e7:
                    29:27:69:76:a5:d0:3f:ed:5c:fc:6e:f7:77:4f:50:
                    49:6f:e5:ac:1f:4a:cc:be:b7:09:a9:f1:bf:87:f4:
                    3c:82:62:c0:f3:21:a1:f3:0f:f6:12:b3:0a:b7:89:
                    b7:a0:cf:1f:a8:2c:bd:2c:6c:bb:25:e3:d1:69:3d:
                    74:31:c7:4a:e7:79:ec:d8:75:c8:ee:ae:4e:41:6d:
                    5f:f4:65:e8:0a:56:91:56:ca:dd:ff:60:fc:1e:a7:
                    fc:23:5d:e5:cb:68:5e:07:f6:31:32:a6:1f:27:30:
                    3d:33:bc:b5:22:a2:24:82:37:c8:a8:e2:9a:81:55:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:54:44:AE:1E:B6:25:02:AE:7B:CE:FA:8C:B7:D1:C1:8C:06:6F
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32322d3232203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:c6:ba:f9:ab:af:95:91:87:79:92:bf:0a:1d:04:0b:11:7e:
         ef:7c:0e:e4:0f:69:01:f0:84:3d:51:58:d1:dc:8d:7f:45:ae:
         d7:e7:a8:bf:d4:c9:a8:7e:a4:7d:6b:67:9b:4b:70:ee:f1:bc:
         8b:c4:e7:93:ef:38:fa:0b:ec:70:82:ed:6b:05:4e:93:00:49:
         5b:8e:a6:41:07:b1:1e:bb:04:d8:60:ea:ad:c7:56:e7:64:38:
         4c:aa:ad:a3:ec:05:f5:17:fc:b0:87:e1:c7:fa:9a:96:b1:b7:
         8e:e7:2d:a1:a2:05:ec:24:c2:2f:7a:af:84:e8:72:7c:74:ed:
         ed:27:8e:df:25:36:8c:26:3b:d6:8e:b3:45:cf:a8:05:b6:b3:
         1b:15:ad:0b:c4:96:e5:ab:bb:8f:76:32:46:92:b0:da:b0:9b:
         b8:5a:73:ce:f5:68:44:7d:18:c5:fa:b8:80:33:47:0e:9b:1c:
         6f:c9:55:10:63:56:3b:f1:d0:d3:68:42:0c:a4:86:02:cb:03:
         1b:54:9e:3b:aa:0c:9c:ab:de:75:84:c1:73:ce:a3:84:3d:72:
         c9:96:00:e3:ec:86:f9:1d:ee:1f:e8:f0:d6:2e:59:1d:39:ec:
         9c:f5:2b:3d:1f:5f:01:ec:3e:e6:b9:a8:f1:fa:1b:f4:f0:a4:
         09:a5:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:03 2026 by rpki-client